Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/57nWjULoeDdiA1pgE_LcgpN4wd4.roa
File: 57nWjULoeDdiA1pgE_LcgpN4wd4.roa (raw, json)
Hash identifier: 5rgfiDtK1gE9VX8N9QoH4qqKhLASMQGEVYCiLACc7G0=
Subject key identifier: E7:B9:D6:8D:42:E8:78:37:62:03:5A:60:13:F2:DC:82:93:78:C1:DE
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DC3072C7BFD3FC9AC03A91EBBB9F1
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/57nWjULoeDdiA1pgE_LcgpN4wd4.roa
Signing time: Sun 01 Jan 2023 23:14:48 +0000
ROA not before: Sun 01 Jan 2023 23:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 85.153.136.0/24 maxlen: 24
85.153.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c3:07:2c:7b:fd:3f:c9:ac:03:a9:1e:bb:b9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7b9d68d42e8783762035a6013f2dc829378c1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:51:ec:2f:7b:67:b7:aa:53:f0:5c:f2:3c:
0c:2d:1a:5e:d3:61:00:45:14:44:82:19:ae:4b:e0:
4a:a1:60:35:d1:b2:09:bd:f8:80:bd:6e:dd:eb:54:
14:4b:6c:bb:d6:ec:16:a5:2a:1c:51:03:23:43:b5:
cb:ac:1f:8e:d0:be:2f:1c:bd:55:6e:46:45:b2:2d:
08:6a:30:b6:ad:2e:2d:96:42:3b:e9:75:64:06:c6:
4d:06:45:ef:77:1a:ba:42:92:45:39:15:70:20:f1:
83:dd:e9:2e:e7:12:bb:9e:fb:21:ce:78:aa:5e:ff:
f6:4a:17:0c:f9:b4:ac:69:f9:83:80:1d:1a:e0:d8:
e1:f5:a8:2d:5b:0e:60:7a:3d:8e:a1:04:b1:83:7d:
91:77:47:fd:0b:a0:6b:f0:b2:a8:c8:3e:5c:2a:08:
6a:c6:74:22:c1:bb:74:b2:8b:ab:c4:0a:4b:80:2d:
78:4c:a5:0e:ba:5c:08:7b:34:0a:c1:3d:6c:0a:4e:
e6:2a:4a:6d:d3:46:e3:99:1e:2a:d9:c7:b7:49:0f:
0b:4b:f5:07:64:8c:19:ed:94:63:87:c0:dc:fe:9c:
9b:4e:1a:98:05:33:11:71:8b:87:61:c4:ec:3f:17:
21:e0:66:9a:c1:7e:2f:4e:f8:9f:71:e1:c5:3e:b9:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B9:D6:8D:42:E8:78:37:62:03:5A:60:13:F2:DC:82:93:78:C1:DE
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/57nWjULoeDdiA1pgE_LcgpN4wd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.136.0/24
85.153.142.0/24
Signature Algorithm: sha256WithRSAEncryption
50:14:8c:f4:94:e2:7d:2b:a0:82:28:12:bf:c6:a8:b5:26:ab:
b3:65:4c:2d:23:1f:40:e4:73:5d:ab:ad:24:e2:12:70:3a:2d:
f8:89:0e:6b:43:c3:c4:2c:72:d4:ba:53:a5:02:d4:24:7c:0a:
7c:59:79:19:e7:ec:8d:35:d5:4c:b6:e1:20:38:12:37:f0:02:
99:74:8a:35:2d:a8:65:38:6d:8b:4c:30:86:19:c0:97:f7:4c:
99:67:6b:5d:94:fc:87:6f:e9:86:d7:cd:ee:dd:bf:d3:ed:03:
2f:5d:c2:41:d5:3d:8a:07:1c:f0:c7:13:f4:09:a5:ad:ce:33:
2c:a1:63:46:fe:ad:cd:12:cf:7f:ed:4c:0b:42:88:0d:2b:0a:
85:46:e2:94:58:dc:ca:96:a5:4e:04:cb:f4:29:bd:0f:55:d2:
c2:91:71:55:37:0c:e9:1f:9a:a7:9b:15:cc:8b:db:35:2e:16:
e7:28:fa:1c:35:77:15:1c:03:c3:5c:2e:82:83:4c:72:e6:3c:
1d:0d:1a:90:c6:37:f4:60:dd:77:31:2c:d8:b3:46:c8:0e:97:
37:4c:39:a4:bc:96:91:e2:58:70:20:58:12:e2:ff:9c:db:4c:
29:39:76:02:9b:18:d8:4d:36:e3:24:42:07:75:63:cf:60:a2:
2d:19:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org